Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: 2UJJod/tV6V1NeSQQOrec8cnTh4LM8969hgiQ8+c7Q8=
Subject key identifier: 6C:D1:28:B2:89:75:91:8A:D6:E1:3D:ED:A6:6A:83:73:D4:28:AA:5F
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A1CA0DDCFC11460555D1FA03BB69E6A9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0C08
Signing time: Wed 11 Nov 2026 10:01:08 +0000
Manifest this update: Wed 11 Nov 2026 10:01:08 +0000
Manifest next update: Thu 12 Nov 2026 10:01:08 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: +nOy0RpRChXIuMR2qjsn7irhN8XRWuaU6R6SJ3Lfzp4=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:0d:dc:fc:11:46:05:55:d1:fa:03:bb:69:e6:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Nov 11 10:01:08 2026 GMT
Not After : Nov 12 10:01:08 2026 GMT
Subject: CN=6cd128b28975918ad6e13deda66a8373d428aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:1d:76:d6:7d:59:d0:4b:d1:11:2a:ff:b3:
1e:01:9e:dd:55:b7:c0:e7:8b:f9:cc:dc:66:4d:4d:
3b:4e:18:bd:19:af:4a:e6:a0:71:61:bd:07:84:93:
40:e9:dd:90:80:98:12:40:7e:2b:ac:9f:14:49:fc:
b4:b4:f1:3f:18:84:2e:e9:d7:12:e4:01:60:69:3a:
0e:b7:d5:31:e5:c2:12:d0:01:ca:ff:02:7d:d6:c7:
78:0d:f8:e1:ba:1e:35:47:9c:90:88:63:39:2e:c9:
42:e4:10:07:02:c4:8c:d4:4b:13:1a:61:63:5a:2c:
c1:f1:01:2b:c2:db:34:b8:c9:d8:99:0f:c4:75:17:
f2:6e:8e:da:ae:92:a9:b8:cc:f5:a6:fa:d6:fe:40:
f1:9d:e0:88:b4:3d:0d:46:76:7e:3e:72:10:00:3f:
88:b1:ee:d1:85:b2:27:64:10:e9:d2:4e:29:87:01:
2e:07:dc:45:47:4d:71:1d:c3:c2:bf:66:99:5a:5e:
a7:59:7c:0e:cf:82:15:59:1f:c1:c6:4f:85:3c:c3:
68:17:b6:94:24:75:b8:da:fe:3e:78:04:ce:78:03:
d7:40:94:66:b2:d1:a3:85:54:5a:2a:9b:f2:7d:03:
62:cb:5a:56:16:7e:8c:bb:73:53:5f:04:44:64:b3:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:28:B2:89:75:91:8A:D6:E1:3D:ED:A6:6A:83:73:D4:28:AA:5F
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:d5:ea:e3:68:9d:ea:7e:70:bf:7e:4f:4c:5a:c6:ca:7f:
a0:bb:a2:81:2e:ec:b6:8d:01:46:f6:82:a8:33:eb:9e:8c:87:
50:79:80:a3:0c:83:ff:06:bb:cf:66:9a:82:65:92:b3:42:5e:
8b:f1:8a:f0:88:35:52:fa:06:97:2c:dd:a2:8a:3c:2b:03:9e:
58:03:04:84:36:5e:f9:a0:63:5e:b2:ea:75:f5:77:2e:0a:a5:
c6:9e:28:0b:ca:92:3e:b1:c0:f3:9e:30:02:d8:3d:94:e3:ec:
96:46:17:80:f7:79:56:15:4f:a1:cf:b1:95:d2:db:9a:34:bf:
d3:a5:bf:e6:53:03:f8:71:e8:8f:32:67:c1:6e:de:1e:c3:e1:
9c:80:44:0e:e7:2b:35:c7:ec:b3:52:0d:62:ea:fd:c6:bd:98:
31:91:2c:4e:66:f7:5b:4a:be:4f:db:79:49:a8:3f:73:3e:b5:
45:d4:3d:b3:fd:5e:4c:df:21:f4:00:c5:b0:32:95:af:74:96:
8f:08:17:c6:b8:b9:47:cd:32:29:3c:05:d4:91:0d:ee:b0:38:
69:93:5b:23:4f:04:18:fa:b2:c0:49:59:7b:e4:ce:9b:8a:8a:
fe:bd:62:38:c9:e0:66:ff:82:76:a9:d9:3f:40:ec:dc:d3:b3:
98:0c:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 16:51:34 2026 by rpki-client